Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          6KT80qcuxIuZBfGJ+A+M1WCIHRzBnobFbbL06p1xbto=
Subject key identifier:   90:D2:73:3F:A9:C8:08:B5:89:7E:05:3E:86:B4:5C:69:B6:0D:3D:D0
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       0195E1906867EBC774FADF2CC03D5408F21C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          0D7E
Signing time:             Sat 29 Mar 2025 11:01:32 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:32 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:32 +0000
Files and hashes:         1: 07kw2MzDV5dpbfYC0MA4AILk1XE.roa (hash: tg8LJDbeLYQBkgtHitpgNGT/W91ZoJCC9459dV5/7ek=)
                          2: 0OhTHF6DxE3cyZK5YOwOI2V2BAI.roa (hash: xOeumj9MpchTNffEKnQPdj1nuV0b4wbm3GvMqDVnZVU=)
                          3: Z4kN8nDsrb7sFEsQvwC-1YneLds.roa (hash: RYq7W3ftzHW7v8PnyhRA0Yz8QSctQ/uuBL07f/0XUZc=)
                          4: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: MDUaJD3WtTuyIAymja/I95hzo40TxdH9yZCQfEdaDZ4=)
                          5: hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa (hash: iUNoFw6w4VaZe+xv8tLLmkJfKNEUjAxo8NvVhIUNSuo=)
                          6: wJVCqkJKW7wdukijJarB4SSlNh0.roa (hash: OCvKaQOoRbSfLx6VPEZE2vLiOcjFXPz8efWK0J/I8to=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:68:67:eb:c7:74:fa:df:2c:c0:3d:54:08:f2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: Mar 29 11:01:32 2025 GMT
            Not After : Mar 30 11:01:32 2025 GMT
        Subject: CN=90d2733fa9c808b5897e053e86b45c69b60d3dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:36:ad:f2:87:81:f6:46:0a:8d:cc:23:4f:
                    1a:ac:1d:af:5c:0b:2a:ba:8f:0d:2a:99:24:4e:e7:
                    0d:ed:1a:80:c3:7e:5a:18:ed:0e:91:51:40:f8:48:
                    c3:27:a1:27:09:26:e5:b0:fd:ce:a9:a7:8e:c8:f6:
                    a2:1b:85:70:3c:ab:e3:78:a1:5f:70:92:26:c1:46:
                    ff:34:01:53:74:27:5a:d9:ce:43:ea:af:74:75:4a:
                    80:45:16:71:80:a1:71:60:a3:6f:d6:f3:09:6a:82:
                    99:68:81:48:6b:74:b0:ed:3d:3c:18:fa:e3:ea:32:
                    15:13:bd:78:b0:ce:f9:9d:dc:a2:07:26:ab:06:7d:
                    3e:99:55:78:95:99:4a:4e:2d:68:02:2b:b0:9d:5f:
                    96:94:3e:15:2d:17:4b:0c:df:be:4d:18:9f:41:61:
                    ba:ea:be:c6:b8:76:a9:e8:ac:8e:d0:74:53:7c:87:
                    c5:18:ff:a5:4c:c3:f3:a5:0f:b5:29:a1:6c:c4:56:
                    8d:28:b4:30:25:26:df:f7:a3:04:a8:f5:a1:d7:7a:
                    f9:f1:d2:a3:e1:66:99:39:1f:d5:6d:f2:82:47:da:
                    30:02:e9:9e:39:68:ee:ad:e8:d8:21:af:8a:ee:5c:
                    7e:72:f5:b0:26:16:70:14:0a:1b:82:05:2b:2a:0d:
                    f6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D2:73:3F:A9:C8:08:B5:89:7E:05:3E:86:B4:5C:69:B6:0D:3D:D0
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9e:24:b8:a0:32:39:95:eb:94:0a:ce:11:64:66:50:70:95:
         f4:01:51:94:da:cf:c6:f5:86:a9:4c:17:43:d0:0a:a3:4e:5c:
         7d:ab:40:5b:90:81:f1:af:20:91:ec:0c:f9:8f:df:ce:40:78:
         21:e6:4a:32:16:4c:1f:5f:ca:03:6c:94:95:1e:20:1e:a1:6f:
         63:82:79:2d:bb:fb:d7:02:b9:83:b3:03:15:33:55:13:4b:d0:
         8f:b1:a8:19:97:f6:b1:51:53:64:58:d5:20:6f:9e:c3:73:6e:
         f3:3d:3a:38:c7:07:de:ad:44:50:b8:22:35:06:b8:85:a4:e1:
         af:5d:94:3b:f7:14:47:fb:7a:45:6b:b4:37:20:ed:22:28:4f:
         01:56:16:37:ff:2e:d2:90:51:6d:6c:a3:f3:c2:d9:a7:b4:3f:
         27:64:9f:e3:4a:2b:4a:63:69:0c:38:02:aa:63:36:d9:d8:dd:
         b1:46:a6:b9:03:2c:86:94:d4:6b:fa:9d:be:a4:00:50:81:a8:
         52:2b:3e:f1:44:b2:23:42:f3:ae:7a:08:5b:bf:4b:b8:06:56:
         65:ae:42:a2:d5:e3:4f:62:a8:33:20:65:75:9c:ab:9a:0e:a1:
         94:d7:9f:a2:be:6c:d5:05:99:1c:39:bf:fd:9e:5c:b8:04:75:
         4c:39:39:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:26 2025 by rpki-client